Zero Day Monitor

Zero Day Monitor

105645

New CVEs

127

Critical

0

Pre-CVE

1488

CISA KEV

729

Articles

50/50

Feeds

Vulnerabilities

cisco · CVE-2026-20131 — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root oKEV

secure_firewall_management_center· CVSS 10.0· CWE-502

synacor · CVE-2025-66376 — Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets (CSS) @import directives in an HTML e-mail message.KEV

zimbra_collaboration_suite· CVSS 7.2· CWE-79

microsoft · CVE-2026-20963 — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.KEV

sharepoint_server· CVSS 8.8· CWE-502

cisco · CVE-2026-20128 — A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vKEV

catalyst_sd-wan_manager· CVSS 7.5· CWE-257

cisco · CVE-2026-20122 — A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attaKEV

catalyst_sd-wan_manager· CVSS 5.4· CWE-648

google · CVE-2026-4464 — Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

chrome· CVSS 8.8· CWE-472

google · CVE-2026-4462 — Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

chrome· CVSS 8.8· CWE-125

google · CVE-2026-4460 — Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

chrome· CVSS 8.8· CWE-125

google · CVE-2026-4454 — Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

chrome· CVSS 8.8· CWE-416

google · CVE-2026-4447 — Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: H

chrome· CVSS 8.8

→ View full list

Urgent

langflow langflow

Wholesale Suite Wholesale Lead Capture Plugin for WooCommerce

Wholesale Suite Wholesale Lead Capture Plugin for WooCommerce

ConnectWise ScreenConnect

Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse